Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: 89dRUEwKcVT3nZfelrEo5H2NfGjVjeLUzMIuwiyV640=
Subject key identifier: 49:D6:34:B5:A1:9E:14:95:26:C8:C7:78:12:11:3E:99:CB:99:C1:44
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 019A7149E40B127AB2C57DDA3396F1AA0107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 11F4
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: /ZvexAlahjyk1MghG4rbC5I2PQSfEGluNWAk+0lW+bQ=)
2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:0b:12:7a:b2:c5:7d:da:33:96:f1:aa:01:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=49d634b5a19e149526c8c77812113e99cb99c144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:a4:d9:2f:07:e7:c0:d7:27:11:a0:86:dd:
9a:1e:44:2d:11:d9:0d:4c:9d:77:95:35:2a:60:76:
ba:f2:9d:70:36:50:b3:9a:3d:6b:6b:97:87:46:96:
e4:0e:c0:be:8f:1a:dd:ee:42:b9:20:64:4b:83:d3:
3a:1a:bd:2c:de:a0:5a:fc:95:a8:b7:67:b2:fc:c8:
08:6e:4a:11:88:cd:dd:0e:e4:a0:02:44:30:d6:48:
d7:8c:ae:11:aa:37:e0:96:ac:63:18:f5:94:6a:77:
22:45:29:4e:c8:83:fa:86:ab:f6:46:54:4f:d6:90:
86:c9:cf:d2:f1:41:53:4f:18:72:e9:55:fb:97:61:
35:5a:c4:26:c7:66:3b:ae:6f:c2:ab:eb:7f:bf:88:
8c:2a:60:62:8a:b0:49:98:63:01:78:e0:fa:c9:20:
9d:8e:96:c3:e9:b5:6e:e1:3c:7d:59:5b:d2:8c:7c:
ac:87:39:ac:f5:76:ca:99:a7:9a:33:05:1c:72:e3:
d2:45:36:8d:27:b9:d9:a5:ec:3f:78:73:17:e6:a6:
d3:4c:9a:19:36:59:1d:d1:6c:0e:17:8f:00:9b:ab:
4c:d1:dd:df:cb:56:44:62:81:e5:24:82:ae:f0:42:
da:0a:ff:5b:64:6a:c1:8b:70:f4:59:48:e7:e4:59:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:34:B5:A1:9E:14:95:26:C8:C7:78:12:11:3E:99:CB:99:C1:44
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8e:a6:51:a4:74:d6:30:12:ed:07:d8:1f:8f:e2:bb:7f:42:
dd:5b:e9:66:b2:57:57:0c:5f:c8:53:7e:8c:e9:2d:7a:07:76:
cc:74:9b:9b:ec:50:2b:98:58:0c:68:c4:80:d0:a1:ab:52:60:
00:c4:2f:fb:61:3f:d0:42:3d:5f:6f:f7:c5:a2:cc:8d:77:26:
f0:e4:c8:59:18:20:d2:26:b9:51:46:de:f4:7b:ea:9f:c8:13:
a5:a4:f0:af:af:89:90:cb:e6:18:85:73:47:f5:1b:7c:11:ea:
b3:13:f5:5b:de:dc:ff:02:7a:f6:ae:f4:aa:ed:86:de:28:6e:
0a:0d:ae:bf:ff:05:8f:e8:27:ce:c4:66:e5:03:82:99:c3:0b:
68:d3:c1:a3:14:4d:c1:cb:85:7b:0f:48:8c:65:e9:f6:f4:af:
ac:2a:50:64:fb:d1:32:87:5a:90:fb:40:b7:64:ac:04:c3:51:
5f:aa:15:a5:bb:04:9b:18:79:cc:78:98:f1:c7:5e:5f:9a:f3:
e0:27:99:e7:88:3c:b4:7f:d6:0f:4b:00:4b:bd:8d:96:94:85:
c4:a1:96:73:c6:de:4f:58:cb:bb:34:22:d9:85:eb:04:ae:95:
0f:f5:15:e1:ae:02:7f:ac:2f:c2:6e:c0:54:4a:55:ee:c1:b3:
6a:ef:31:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSeQLEnqyxX3aM5bxqgEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmU5MDZmODJiM2Q1MTU1NjU5ZGFlNGQwODY3NjllZjEy
YTgyMTQwHhcNMjUxMTExMDUwMDU5WhcNMjUxMTEyMDUwMDU5WjAzMTEwLwYDVQQD
Eyg0OWQ2MzRiNWExOWUxNDk1MjZjOGM3NzgxMjExM2U5OWNiOTljMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS2k2S8H58DXJxGght2aHkQtEdkN
TJ13lTUqYHa68p1wNlCzmj1ra5eHRpbkDsC+jxrd7kK5IGRLg9M6Gr0s3qBa/JWo
t2ey/MgIbkoRiM3dDuSgAkQw1kjXjK4RqjfglqxjGPWUanciRSlOyIP6hqv2RlRP
1pCGyc/S8UFTTxhy6VX7l2E1WsQmx2Y7rm/Cq+t/v4iMKmBiirBJmGMBeOD6ySCd
jpbD6bVu4Tx9WVvSjHyshzms9XbKmaeaMwUccuPSRTaNJ7nZpew/eHMX5qbTTJoZ
Nlkd0WwOF48Am6tM0d3fy1ZEYoHlJIKu8ELaCv9bZGrBi3D0WUjn5FkJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnWNLWhnhSVJsjHeBIRPpnLmcFEMB8GA1UdIwQY
MBaAFEBukG+Cs9UVVlna5NCGdp7xKoIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgt
YTE4YTA1MTI3NzZjLzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgtYTE4YTA1MTI3NzZj
LzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI6mUaR0
1jAS7QfYH4/iu39C3VvpZrJXVwxfyFN+jOktegd2zHSbm+xQK5hYDGjEgNChq1Jg
AMQv+2E/0EI9X2/3xaLMjXcm8OTIWRgg0ia5UUbe9Hvqn8gTpaTwr6+JkMvmGIVz
R/UbfBHqsxP1W97c/wJ69q70qu2G3ihuCg2uv/8Fj+gnzsRm5QOCmcMLaNPBoxRN
wcuFew9IjGXp9vSvrCpQZPvRModakPtAt2SsBMNRX6oVpbsEmxh5zHiY8cdeX5rz
4CeZ54g8tH/WD0sAS72NlpSFxKGWc8beT1jLuzQi2YXrBK6VD/UV4a4Cf6wvwm7A
VEpV7sGzau8xGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:34 2025 by rpki-client